
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier: gvmeTie1Z6vYsnTD26Kcgo/X41ISDzZed/758GHvyAs=
Subject key identifier: E1:9B:B6:BA:78:49:26:7B:D4:CF:25:85:B3:48:F8:DC:E7:C9:DE:03
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 019D38D38CB88F3B19870A6E99919180F045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: FES_Ddrn1-Dv05kJ2PK6RSL3F3U.roa (hash: QmqcKA8GQhgFV5Rf15kElQFkLjDwA3xqc+UDlx53Syw=)
2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: TfEPzAiTZ683S+695oZ5tzr+MUBXYFNmJSEeizocjlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8c:b8:8f:3b:19:87:0a:6e:99:91:91:80:f0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=e19bb6ba7849267bd4cf2585b348f8dce7c9de03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:74:55:cb:36:75:ad:3c:8c:3b:5e:bd:c7:e5:
b4:45:ba:e8:31:03:fa:c6:69:76:0e:1f:84:09:93:
3a:94:86:8b:25:b3:de:91:74:10:b4:f3:98:9a:ca:
0e:c6:f5:12:60:ef:31:e4:2e:ff:1f:72:f4:e9:0b:
1b:53:df:a6:72:30:3c:7f:9b:6d:bb:f9:35:d0:c4:
90:4c:90:e1:43:ac:0a:b4:ae:c1:0d:d5:3c:42:81:
cd:48:7b:b5:96:61:c7:d4:b1:b2:4a:25:e2:10:7f:
97:8a:05:b8:21:dd:15:b0:22:bd:33:ae:53:6d:f5:
38:b0:8e:be:d0:df:24:54:bd:89:02:b6:0d:34:f6:
97:ae:cb:fc:de:4e:c2:35:f4:a7:c8:51:ee:d6:7e:
bb:2c:72:71:9a:9a:be:dd:87:3e:dc:6b:eb:04:c8:
57:b5:8d:fc:d2:8b:d8:f1:ee:11:39:69:6b:0d:61:
f7:5e:1e:8a:cf:01:ae:43:6c:c7:cb:1b:0f:62:d9:
ce:c3:39:a2:89:1f:e8:da:11:30:ef:07:78:96:d3:
0c:e5:a3:b2:99:e3:79:9e:a6:d8:47:a7:bb:99:93:
01:dc:9e:f9:da:f1:d6:48:62:a3:64:f6:5f:ab:96:
f2:f6:ae:fe:2c:76:c2:fb:61:98:47:c7:6b:a7:71:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:B6:BA:78:49:26:7B:D4:CF:25:85:B3:48:F8:DC:E7:C9:DE:03
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:5b:95:01:d9:e8:05:6f:58:cd:2a:4b:eb:dc:6b:52:0b:
c0:b7:49:6f:dc:8b:e6:e4:78:ed:ec:d0:9e:38:07:be:69:0e:
1c:7c:76:7d:67:0f:d2:d4:c1:0f:21:75:d2:ca:52:92:96:78:
50:65:99:37:f1:da:f4:86:7f:2e:89:34:22:76:10:f1:8d:65:
89:ba:fa:75:69:02:0f:0f:8b:d2:7a:89:10:1c:96:93:f4:1b:
f8:b4:11:97:fb:bd:0e:6f:a0:5d:40:66:84:44:ff:70:65:ac:
ca:6c:6b:a5:fa:96:39:18:32:b8:1a:e7:ec:12:68:fd:74:73:
d5:24:5d:cc:7f:69:ca:5d:f5:95:be:9b:0c:f8:60:07:aa:ba:
25:19:23:eb:14:ee:02:25:d8:39:97:64:3f:12:60:02:a7:e6:
b7:52:21:f3:6b:06:d3:64:ac:7b:29:d1:85:25:a1:bd:a1:74:
bc:62:ba:44:7b:a1:5c:ab:90:33:b1:c6:9f:95:75:de:09:c7:
46:97:cd:ff:6d:62:49:fe:6d:a3:8c:c1:2e:10:89:0f:5e:de:
82:03:8d:5e:ff:4d:f5:7d:f0:8f:4c:7c:9d:9d:8c:63:37:6f:
80:b2:27:60:ed:22:6d:93:61:06:f6:54:a2:82:71:e1:43:87:
44:2e:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:37 2026 by rpki-client